System and method for providing secure identification solutions

ABSTRACT

The present invention provides a method and system for verifying and tracking identification information. In an embodiment of the invention, a system for delivering security solutions is provided that includes at least one of the following: a radio frequency (RF) identification device, an identification mechanism (e.g., a card, sticker), and an RF reader.

BACKGROUND OF THE INVENTION Field of the Invention

The present invention generally relates to a system and method forproviding secure identification solutions, and specifically to a systemand method for verifying and tracking identification information.

SUMMARY OF THE INVENTION

The present invention provides a method and system for verifying andtracking identification information. In an embodiment of the invention,a system for delivering security solutions is provided that includes atleast one of the following: a radio frequency (RF) identificationdevice, an identification mechanism (e.g., a card, sticker), and an RFreader/writer. The system and method can be used in numerousembodiments, including, but not limited to:

-   -   An RF Registration Item (e.g., License Plate) and Method of Use.    -   An RF Identification Mechanism (e.g., Passport) and Method of        Use.    -   An RF Communications Device (e.g., Cellular Telephone) and        Method of Use.    -   A System and Method of Border Crossing Control.    -   A System and Method for Limiting Software Downloads to        Authorized Users.    -   A System and Method for Airport Security.

The embodiments of the present invention are discussed below. Thoseexperienced in the art will see that multiple features of certainembodiments described below can be incorporated into other embodimentsboth described and not described below.

The present invention is not limited to the above embodiments.Additional advantages and novel features of the invention will be setforth in part in the Description that follows, and in part will becomemore apparent to those skilled in the art upon examination of thefollowing or upon learning by practice of the invention.

BRIEF DESCRIPTION OF THE FIGURES

FIGS. 1, 2 and 4 illustrate the general invention, according to oneembodiment of the present invention.

FIGS. 5-8 illustrate the RF registered item and method of use, in anembodiment of the present invention.

FIGS. 9-11 illustrate the RF passport and method of use, in anembodiment of the present invention.

FIGS. 12-14 illustrate the RF communications device and method of use,in an embodiment of the present invention.

FIGS. 15-18 illustrate a system and method for border crossing control,in an embodiment of the present invention.

FIGS. 3A-3B and 19-21 illustrate a system and method for limitingsoftware downloads to authorized users, in an embodiment of the presentinvention.

FIGS. 22-23 illustrate a description of the system and method forairport security, in an embodiment of the present invention.

DESCRIPTION OF THE INVENTION I. General RF Identification System andMethod of Use

FIG. 1 illustrates an overview system diagram 100, according to oneembodiment of the present invention. This embodiment comprises an RFdevice 110 connected to or embedded on an RF identification mechanism105, and an RF reader/writer 125. The RF device 110 includes a chip 115and an RF antenna 120.

A. RF Device

FIG. 2 illustrates RF device 110, according to one embodiment of thepresent invention. The RF device includes a chip and an RF antenna. TheRF device allows electronic identification via the reading of datastored in the chip in a contactless mode.

FIG. 5 illustrates a dual frequency RF device 110, according to oneembodiment of the present invention. Those experienced in the art willsee that a one frequency or multiple (more than two) frequency RF devicecan also be used. The RF device includes the following components: Amodulator 215 is a device that receives baseband signals from anantenna. An AC/DC converter 220 is a device that receives an alternatingcurrent (AC) and converts it to direct current (DC). An encoder 225 is adevice for encoding information received so that it may be utilized byanother device or protocol. A decoder 245 is a device that decodesinformation from the encoder output so it may be used by another deviceor display. A power control 250 is a device which regulates voltage andcurrent to protect an apparatus from both power surges and low power. Aninstruction sequencer 230 is a device that queues instructions to besent to the chip's internal memory. A security management unit 255 is adevice that checks and validates the cryptographic keys that will besent to the cryptographic block. A cryptographic block 210 is a devicethat stores the security keys. These keys are checked and validated togrant or deny access to the memory chip. EEPROM memory 205 stores data.Information can be read and written from or to this device.

A more detailed description of an RF device can be found in U.S. patentapplication Ser. No. 10/118,092 filed 9 Apr. 2002; PCT PatentApplication PCT/IB02/01439, filed 30 Apr. 2002, which are hereinincorporated by reference. Additional information on the RF device canbe found in the accompanying documents.

B. RF Identification Mechanism

Numerous features of RF identification mechanism are utilized in oneembodiment of the present invention. In this embodiment, the RF deviceis embedded in the RF identification mechanism. One example of an RFidentification mechanism is a card, and the description below refers tothe identification mechanism as a card in several examples. However,those experienced in the art will recognize that multiple otherembodiments of the identification mechanism are possible, including, butnot limited to: a card, a cellular phone, and a personal digitalassistant (PDA).

There are a variety of ways to make identification cards that areresistant to fraud and counterfeiting. In one embodiment, the presentinvention incorporates numerous security features, as explained below.

C. Features of Secure Identification Mechanisms

The present invention offers a variety of solutions for making secureand durable identification mechanisms resistant to fraud andcounterfeiting. The following features help make the identification cardmore secure. These features are only examples, and those experienced inthe art will see that the present invention is not limited to thesefeatures and that many other features can be incorporated.

In one embodiment of the present invention, at least one of thefollowing features is incorporated: visible features, machine readablefeatures, and proprietary substrate based features. Visible featuresrequire only the human eye to detect the security features. Machinereadable features require special hardware (e.g., an ultraviolet lightsource, magnetic reader) to detect the security features. Proprietarysubstrate based features are security features incorporated within aplastic substrate.

In one embodiment of the present invention, at least one of thefollowing characteristics are present relative to the identificationmechanism: it is extremely difficult to duplicate; it is tamper proof,it is recognizable either visually or utilizing a machine readabledevice; it is durable enough to withstand harsh environments; it isproduced by specialized, difficult to obtain production equipment; itcan be machine readable; and cost savings are realized by volumeproduction of the identification mechanism.

Security features curb petty, semiprofessional and professionalcounterfeiters by creating features that are highly difficult toreproduce. For example, the ready accessibility of dye sublimation cardprinters, color scanners, color printers, heat sources (e.g., hairdryers), and color photo copiers make it relatively easy to reproduceordinary photo identification cards. In one embodiment, the presentinvention, therefore, utilizes images and texts that cannot be scannedor photocopied without noticeable distortion, or cannot be recreatedwithout highly sophisticated and expensive equipment.

Security Features.

In one embodiment, the present invention can incorporate at least one ofthe following security features:

-   -   Tamper Proof Material. This material consists of metalized        polyester treated with a chemical that will not allow an auto        adhesive hologram to be transferred from one document to another        one. It will self-destruct by any attempt at transfer.    -   Bidi-Tri-Dimensional at Three Levels. This material must be        created in an optical table by a qualified holographer and with        a combination of design and dot-matrix effects created by        precise digital means allow identification of the document's        authenticity.    -   Hidden Images. A hologram can contain a hidden image that cannot        be detected with the naked eyes. The hidden image can be        identified by shooting a laser at 45 degrees. The reflection        shows a spectrum of a text shield or design. A special lens to        protect the eye from laser damage can be used.    -   Dot-Matrix. A dot-matrix 1,000 dots per inch (DPI) effect is        created in a computer and comprises engraving dots with a laser        in a specific angle which a minimum density of 1200 to 2000        DPI's. It allows printing of micro text contained within a        hologram with great precision and creates very precise 2D and 3D        effects.    -   Hot Stamping. Hot stamping places a hologram on a document by        thermal transfer. This hologram will interlace with a paper        substrate and will not allow a hologram to be transferred from        one document to another.    -   Moire Pattern. The moire pattern is a design-based pattern which        superimposes two patterns with non-identical spatial        frequencies. The effect is visually detected after utilizing a        normal photocopier to reproduce the original pattern. The        reproduced pattern induces a “moire” or aliasing which        immediately suggests the reproduced image is counterfeit. The        original is produced utilizing digital image technology which        differs from normal photocopy technology. This effectively        “tricks” the photocopier and reveals the moire in the reproduced        pattern.    -   Hot Stamp Metalized Hologram. This feature is a        visual/substrate-based feature which can also be machine        readable. It uses a special metalized hologram (e.g., as found        on various currencies) or a holographic hot stamp (e.g., that is        non-machine readable). This feature comprises special stripes        placed within the card laminations and visible to the eye. These        holograms can be proprietary in order to limit the availability        to counterfeiters. The metalized holograms can also be machine        readable to verify authenticity. The security of this feature is        high because to duplicate it, a counterfeiter must have access        to both the card manufacturing equipment and the source of        materials, which are both difficult to obtain.    -   Microprint: Offset Printed, Visual/Machine-Readable Text of        Particular Size. The text is indecipherable without the use of a        reading lens, and is usually incorporated as a single line. This        feature is used to print misspelled words to fool counterfeiters        who often assume complete and correctly spelled microprint. The        offset printed text is located under a translucent lamination to        protect it from abrasion. This feature is difficult to produce        with clarity and resolution using a photocopier, scanner, or dye        sublimation printer.    -   Microprint: Visual/Machine-Readable Text of Particular Size.        This text is indecipherable without the use of a reading lens,        and is usually incorporated to appear as a single line. This        feature is used to print misspelled words to fool counterfeiters        who often assume complete and correctly spelled microprint. This        feature is difficult to produce with clarity and resolution        using a photocopier, scanner, or dye sublimation printer.    -   Ultraviolet Fluorescence: Offset Printed,        Visual/Machine-Readable Art or Text which Produces Light When        Activated by an Ultraviolet Light Source. This feature is        normally undetectable to the naked eye and can be overlooked by        the casual counterfeiter. This feature is difficult to produce        with easily obtained equipment. Special fluorescent colors are        available for added security.    -   Light Pipe. This is a substrate based, machine readable feature        requiring a light source to detect. This feature is produced        using optical techniques which direct light to specific        locations of the card (e.g., the edge). The effect is a        brilliant light at a location different from where the light        source is pointed, and usually in a specific color. Since this        feature involves specific translucent materials and optical        design of substrates, counterfeiters may never detect this        feature. It is also almost impossible to recreate such a        feature.    -   Laser Engraving. This visual substrate-based feature can be        either tactile or subsurface depending upon the types of        plastics employed. The feature can be either graphic or        alphanumeric. Using a laser, a pattern or alpha numeric text is        ablated into the sub-layers of a plastic card. Depending on the        parameters of the laser system and the materials of card        substrate, a tactile or subsurface mark appears. This feature is        particularly effective in the serialization of cards to reduce        the risk of lost or stolen cards. The mark cannot be “scraped        off without noticeable damage to the card surface. A tactile        surface is helpful in quick recognition of authenticity. Laser        systems of such complexity are expensive and difficult to        obtain.    -   Metalized Stripe. This stripe is a visual substrate-based        feature which can also be machine readable. This feature uses a        special metalized stripe (e.g., found commonly inside various        currencies) or a holographic stripe (e.g., non-machine        readable). These special stripes are placed within the card        laminations and are visible to the naked eye. The special        stripes can be proprietary in order to limit the availability to        counterfeiters. The metalized stripes can be machine readable to        verify authenticity. This level of security feature is high        because counterfeiters need access to both card manufacturing        equipment and the source of materials. These are both difficult        to obtain.    -   Guilloche Pattern. This feature is an intricate pattern of        curvilinear fine lines which were originally created by “engine        turning,” commonly used in currency design. This visual feature        is design-based and commonly produced using offset printing onto        plastic. It is normally contained under a translucent lamination        which acts as protection from abrasion. The fine lines are        difficult to reproduce with full clarity and resolution on a        copier, dye sublimation card printer, or scanner/personal        computer/inkjet system because the dye sublimation printer can        print only onto the surface of the card.    -   Rainbow Guilloche. This feature is similar to the guilloche        pattern above and is used in conjunction with a color spectrum        which gradually changes from color to color achieving a        continuous effect across the surface of the card. The level of        security is slightly greater since use of a sophisticated color        copier is required to duplicate the pattern effectively.    -   Cameo Effect. This feature is the result of cropping the        background of an image with software to print only a silhouette        of the person which makes it more difficult to replace than a        square image. This effect is combined and interlaced with other        security features, such as hidden infrared on the background of        the picture, or interlacing a photo with guilloche patterns on        the back.    -   Ghost Image. This feature provides the ability to print a second        photo of a person, which is degraded by software, and it is        printed on a faded gray or color scale over the personal data of        the person to protect this information from tampering or        altering. This effect is also achieved by software.

Types of Holograms.

Many different types of holograms with unique visual effects areutilized for commercial and security applications, as well aspromotional products. In one embodiment, the present invention includesat least one of the following holograms:

-   -   Two Dimensional (2D) Hologram. This hologram lies on one single        layer, which projects vivacity of color. With this technique, we        convert standard color line artwork or photography into an array        of holographic colors.    -   Three Dimensional (3D) Hologram. This hologram is created from a        solid model or sculpture. The product's third dimension is        captured. The design becomes a 3D image after the depth of the        image is captured through the use of a sculpture. A logo or        product will be seen without the need of special glasses or        lenses.    -   Two/Three Dimensional (2D/3D). This hologram combines a        superficial layer with other dimensional layers, which can be a        combination of both technologies, as mentioned previously. One        image produces multi-color levels because of the positioning of        the various layers. This system adds a third dimension to        pictures.    -   Line Artwork & Photographs. One embodiment of the present        invention uses line artwork, photographs, or a combination of        both, to create several layers of images separated by specific        distances in order to give the illusion of depth. In general,        two layers are enough, but if necessary, five different layers        of images can be used.    -   Colorgrams. Also known as true color holograms, colorgrams        usually use someone's photo. It is made up of photographic        quality art-work. These holograms are surprisingly capable of        displaying true colors of the object, like true human skin tones        or the original colors of a flag. If a counterfeiter cannot get        the original photo, they cannot duplicate the label. It is a        good way to prevent counterfeiting. The colorgram system is        similar to the 2D/3D system. Full-color photographs are        reproduced in their true, original colors at a specific angle,        usually at a 45 degree viewing angle. The system can combine        photographs with line artwork at different layer levels.    -   Stereograms. Stereograms involve the latest in advanced        technology. They are the result of a complex system that gathers        full images, volume, movement, color and total animation. Total        animation gives the sensation of the movement of a live        recording.    -   Holomatrix™ from 50 DPI to 2000 DPI. This feature comprises        microtext, optical variable effects, and computer-generated        optical devices. Graphic images for this type of hologram are        created with microdots. Each dot is an individual embossment        made with a laser beam. This feature creates holograms through        the use of sophisticated computer technology. The laser beam        individually embosses each dot, creating a luminous image with a        fascinating presentation of colorful optical effects. This        technique prints small dots and is similar to a laser printer or        inkjet system. These dots are holographic gratings that act like        small prisms that sparkle intensely. With this system, optical        patterns can be built of images in such a way that the images        can be viewed at a 360 degree angle, and have multiple images in        the same hologram. Because of the difficulty of reproducing        these images, this feature is excellent for security        applications.    -   Diffractive Optical Variable Image Devices. All the products        classified as DOVIDs

(Diffractive Optical Variable Image Devices) present an image whichchanges colors when tilted in various angles. This essentialcharacteristic makes the images impossible to copy or imitate bytraditional printing and graphics software.

-   -   Optical Variable Devices. An optical variable device (OVD) is a        way of printing an image in such a way that certain        characteristics vary when viewed or illuminated from different        angles.    -   Combined Holograms. These holograms combine two or more of the        above mentioned types of holograms. Combining Holomatrix™ with        any of the above types makes the hologram more complex and ideal        for security applications.

Optional Tests.

In one embodiment of the present invention, the identification mechanismis tested in multiple ways. Laboratory tests are used to demonstratedurability, tamper proof, temperature and humidity stability, abrasionresistance, adhesiveness and light stability to ensure durability of theidentification mechanism and to ensure that the dyes will not fade ordegrade before at least 5 years of extensive use. In addition, duallamination can be performed.

One embodiment of the present invention can include at least one of thefollowing tests.

-   -   Static Bending Test. In this test, a composite card is tested to        exceed 100,000 bending cycles without breaking or losing its        integrity.    -   Heat Test. In this test, a composite card is exposed for an        extended period of time to intense sunlight, boiling water, and        a temperature of up to 220 degrees Fahrenheit without twisting        or bending.    -   Rigidity Test. In this test, multiple layers are applied to a        composite card to give it rigidity so that when it is laminated        it will not lose its flat shape, guaranteeing that the bar code        is readable.    -   Durability Test. In this test, a card is placed in a steam        pressure chamber at 160 degrees Fahrenheit for four days to test        that the card will not warp or break, and that the over        lamination will not come off.    -   Abrasion Test. In this test, a card is placed in an agitator        containing a water and sand solution and subjected to 30 minutes        of agitation.

Required Security Levels.

Multiple security levels exist and are explained below.

First Level Security Features.

First-level security features are clearly visible so that any attemptsto modify the text data, photo image, or other personalized informationis evident at a simple glance.

In one embodiment, the first-level security features include a complexhologram with multiple security features, combining a complex hologramstructure with micro printing. The printer and the hologram aretransferred through a holographic registration and a fiber optic sensorto assure very high accuracy. The holographic pattern is alwaystransferred in the same position.

In one embodiment of the present invention, the hologram includes atleast one of the following general features:

-   -   A highly integrated technology and expensive machinery is        required for mass production. Only manufacturers with        sophisticated know-how can maintain its quality.    -   The hologram makes the object visibly distinguished from other        printing materials or those color copied.    -   Some types of hologram (e.g., Kaleidogram, Finegram) ensure more        satisfying security features than of the flat types, since the        most advanced equipment is necessary in the process of        production.

In one embodiment of the present invention, reproduction featuresinclude:

-   -   A Transparent Kaleidogram with protective OP layer that is heat        transferred on to the card book. It covers the entire printed        area.    -   Attempts to remove the hologram layer will damage the        composition of the hologram. Thus it cannot be reused, or        tampered.    -   Combined with micro-letter printing, the reproduction by color        copy or photomechanical process is not feasible, as the 0.26 mm        size characters is ruined when reproduced. Additional        first-level security features can be integrated with the RF        identification mechanism (e.g., card) in the future. An example        of such security features would be icons, symbols, or guilloches        that could be printed in special solvent sensitive inks. These        features can be printed directly onto the intermediate transfer        layer. These security features could be employed at some time in        the future if a solvent tampering technique is identified.

Overall, the proposed first-level security features provide the documentwith excellent protection against altering and falsification, as well asacts of counterfeiting. The features are readily visible and anyattempts to modify the underlying information is evident at a glance.

Second Level Security Features.

Second-level security features can also be included. These second-levelsecurity features are invisible to the eye under normal viewingconditions, and are evident only when using a proper detection device.In one embodiment of the present invention, at least one of thefollowing features is included:

-   -   Invisible Ultraviolet-Fluorescent Features. The visible portion        of the energy spectrum extends from deep blue at, for example,        400 nm to deep red at, for example, 700 nm. Long wavelength        ultraviolet energy in the region of the spectrum for example,        between 350 nm and 400 run, such as 380 nm, is used to excite an        embedded ultraviolet-fluorescent material. These high-energy        ultraviolet photons are absorbed by the fluorescent material        that happens to be invisible or transparent in the 400 rim. to        700 nm region of the spectrum. The ultraviolet photons pump the        absorbing material to excited energy states. The material in the        excited states quickly relaxes back and releases the absorbed        energy again in the form of photons. Because some of the energy        is lost in this transition, the emitted photons have less energy        than the absorbed photons. The visible portion of the energy        spectrum is positioned at the lower energy photon levels.        Consequently, the process results in visible light being emitted        from the material when it is illuminated by ultraviolet light.        In a darkened room, the eye detects the glow being emitted by        the ultraviolet-fluorescent material but not the ultraviolet        light that is used to excite the material.    -   Two-Dimensional Bar Code. The card solution can include a        PDF-417 format barcode (two-dimensional barcode) that is printed        onto the card. The PDF-417 barcode can hold several types of        data (e.g., fingerprint minutiae, personal information).

RF Device.

An RF device can complement all the previously mentioned securityfeatures, as it has a unique identifier (e.g., a unique 64 bit serialnumber), and the information contained on it is protected by sundrycryptographic methods. The capacity of the device will allow a greatdeal of information about the holder to be stored on the device (e.g.,fingerprint minutiae or other biometric template, the holder'sbiographical information, statistical information). Those experienced inthe art will see that an RF device allows data to be written to and readfrom the device via an antenna without the holder having to present thedocument for verification through traditional methods such as visualinspection, or other method of machine reading.

Third Level Security Features.

Two optional security features can be changed every eighteen months:special IR-activated security taggant material and proprietary securitytaggant material.

Special Infrared-Activated Security Taggant Material.

A special ceramic compound (e.g., such as a product named Taggant,provided by Secure Products) is mixed with a clear ink media in verysmall concentrations. (The ceramic compound is referred to as Taggant,but those experienced in the art will recognize that other ceramiccompounds or equivalent product can be used.) This mixture is printed onthe intermediate transfer material surface. After being ground to smallparticles that are approximately 2-3 pm in diameter, the special ceramiccompound appears to be a very fine white-colored powder. The combinationof the white color, the small particle sizes and the low concentrationcauses the material to be invisible to the eye.

A low-power, eye-safe near-infrared laser can be used to activate thespecial IR-activated taggant material. The input wavelength of the lasermust be tuned within a 3-5 nm bandwidth in order to activate thematerial. The input energy is pumped into the material with the lowerenergy photons of the laser. The combination of the long lifetimes forthe excited energy states and the high concentration of photons from thenear infrared laser result in a second transition upward in energylevel. In other words, two photons are absorbed by the material toincrease the available excitation energy. These high excitation energystates relax releasing photons in the visible portion of the spectrum aswell as the near-infrared portion.

This process of effectively adding two lower energy photons together torelease a higher energy photon is called “up-conversion.” The specialIR-activated security taggant material has three separate emissions orsecurity features. When an appropriate infrared laser, which isinvisible to the eye, is focused on the special taggant material, threefeatures are emitted simultaneously. These three features are a visiblegreen spot at the point of focus, a visible blue spot at the point offocus, and an invisible infrared point at a higher energy level in thenear-infrared portion of the spectrum. When viewed by the eye, the greenand blue spots blend together to create a vivid turquoise color.However, all three features can be detected automatically and separatelywith the proper equipment.

Proprietary Security Taggant Material.

A proprietary security taggant material can also be included in the carddesign. A special ceramic taggant material (e.g., such as the oneproduced by Secure Products) exhibits multiple security features and isin part based on the “upconversion” concept. The white powder is groundinto particles that are 2-3 nm in diameter and is mixed into a clear inkmedia in very small concentrations. Again, as before, the combination ofthe white color, the small particle sizes and the low concentrationcauses the material to be invisible to the eye. However, this specialmaterial can be activated by several wavelengths and each activationwavelength results in a different response.

One characteristic and security feature is activated by a speciallow-power, eye-safe near-infrared laser. The activation bandwidth isapproximately 3 nm and is located on the longer wavelength side of theactivation energy required for the second-level feature. Laser devicesare far less common in this area of the spectrum. When the specialtaggant is excited by a laser specially tuned to this excitationfrequency and bandwidth, two separate emissions are observed. Oneemission is in the visible portion of the spectrum and can be observedas a green spot at the point of incidence. The second emission is in thenear-infrared portion of the spectrum near the excitation wavelength ofthe first optional security feature.

A second characteristic and security feature is observed by using asecond low power, eye-safe near-infrared laser at about the sameexcitation energy as the similar second-level feature. At thisexcitation wavelength, a green spot can be observed at the point ofincidence due to the “up-conversion” process.

Finally, a third characteristic and security feature can be observed byapplying energy in a wider bandwidth in the upper portions of thevisible energy spectrum. This wavelength of energy is absorbed andre-emitted as longer wavelength infrared energy. In one embodiment, theinitial implementation activities will focus on a verification processthat utilizes a single excitation wavelength and a single observationwavelength. The implementation of the other embedded securitycharacteristics can be phased into the program as new features arerequired to maintain the overall security of the card documents. Sincethese untapped security features and benefits will have existed in thedocuments from the initial issuance, the implementation of the newfeatures will minimize the impact to the overall system.

In addition, new security features can be integrated into the presentinvention should the need arise.

D. Method of Using the General RF Identification System

FIG. 4 illustrates the methods of using the RF identification system400, according to one embodiment of the present invention.

In 405, the identification information (e.g., fingerprint, picture) iswritten to a chip with an RF device. In 410, the chip is then embeddedon an identification mechanism (e.g., license plate, passport, card). In415, a user enters an area where identification information must bepresented. In 420, an RF reader/writer reads the identificationinformation from the chip. In 425, the user allows identificationinformation to be taken (e.g., a fingerprint scan, an authority checks auser's face) and this information is compared to the chip data to verifythe user's identity.

II. RF Registered Item and Method of Use

One embodiment of the present invention allows authorities to trackinformation regarding a registered item (e.g., a vehicle), identify theitem, and determine whether a driver of the item has the right tooperate the vehicle. The present invention is described using theillustration of a license plate, but those experienced in the art willrecognize that multiple other embodiments are possible, including, butnot limited to: a sticker (e.g., a self-adhesive decal that can beplaced on an automobile window, windshield or license plate), an RFembedded license plate (e.g., if the license plate is to be manufacturedwith some non-conductive material, the RF device can be embeddeddirectly into the license plate), an encapsulated RF device (e.g., inthe housing of a rear-view mirror, headlights or taillights, thevehicle's front or rear bumpers, or in any non conductive component ofthe vehicle; the device can be encapsulated in such a way that it willresist normal use and exposure to the elements, or embedded directlyinto the materials comprising the aforementioned placement media).

The present invention can be used, for example, for vehicleidentification, border crossing solutions, traffic violations, insuranceprograms, pollution control, vehicle access control, traffic logisticsplanning and engineering, toll booths, and other vehicle controlapplications. The present invention takes centrally stored informationand makes it accessible to the field (e.g., to police or otherauthorities). It also extends and expands the verification of individualand item (e.g., vehicle) information.

A. RF Registered Item

FIG. 5 illustrates an RF registered item 500, according to oneembodiment of the present invention. The registered item 500 includesthe following components: A modulator 515 is a device that receivesbaseband signals from an antenna. An AC/DC converter 520 is a devicethat receives an alternating current (AC) and converts it to directcurrent (DC). An encoder 525 is a device for encoding informationreceived so that it may be utilized by another device or protocol. Adecoder 545 is a device that decodes information from the encoder outputso it may be used by another device or display. A power control 550 is adevice which regulates voltage and current to protect an apparatus fromboth power surges and low power. An instruction sequencer 530 is adevice that queues instructions to be sent to the chip's internalmemory. A security management unit 555 is a device that checks andvalidates the cryptographic keys that will be sent to the cryptographicblock. A cryptographic block 510 is a device that stores the securitykeys. These keys are checked and validated to grant or deny access tothe memory chip. EEPROM memory 505 stores data. Information can be readand written from or to this device.

B. Method of Using RF Registered Item

FIG. 6 illustrates the method of using RF registered item 600, accordingto one embodiment of the present invention. In 605, individualidentification information (e.g., fingerprint, picture) and/or vehicleidentification information (e.g., registered vehicle, license number)are collected and written to an RF device (i.e., a chip with an RFantenna). In 610, the RF device is embedded onto an identificationmechanism, a license plate. In 615, an authority wishing to check avehicle uses an RF reader/writer to read the chip data. In 620, theauthority takes and compares the individual identification information(e.g., user's fingerprint, check user's face) and/or vehicleidentification information (e.g., check make and model of vehicle, checkvehicle license number) and to the chip data to verify an individual'sidentity and whether the individual has the authority to possess andoperate the vehicle.

In one embodiment, a selective metalizing procedure is used toselectively metalize the areas which will not carry the RF device. Thiscan be done by using a mask, as illustrated in FIG. 7.

C. Method of Making RF Registered Item

In one embodiment, the identification mechanism (e.g., license plate)comprises a material that allows visual validation of the registration,even at night. The material can be a retro-reflective material,holographic foil, or another substrate with a high metal content.

FIG. 8 illustrates method of making RF registered item 800, according toone embodiment of the present invention. In 805, antennas are producedon a demetalized or selective metalizing process. In 810, afterdemetalizing, resistance is decreased and conductivity is increased byapplying inks containing silver or copper (e.g., conductive inks) In815, an adhesive layer is applied to the antenna in a Web environment orwith automatic label capabilities.

In one embodiment of the present invention, at least one of thefollowing is tracked:

-   -   Vehicle Identification Number (VIN). The VIN is the vehicle's        international registration number and is the “fingerprint” of        the car. Vehicle identification is performed by visually reading        the car's VIN, and using the software to validate the VIN. This        software allows a user to determine if the vehicle has been        modified, altered, and/or stolen.    -   Owner Identification. Owner identification is made using        photographic information (e.g., a photograph) and/or biometric        information (e.g., a fingerprint, iris pattern) stored in the RF        device.    -   Tracking Information. The RF device is used to read the VIN        number and the owner's information. This can be used to identify        a vehicle or individual reliably without having to connect to a        central database.    -   Central Data Base. The central data base validates the identity        information for increased security (e.g., tracking who and where        the device was produced and who it belongs to).

D. Optional Security Features

In one embodiment of the present invention, at least one of thefollowing security features is included:

-   -   Secure Device. In one embodiment, the device has: numerous        (e.g., five) visual inspection security features visible only to        the naked eye; numerous (e.g., three) non-visual forensic        security features that require a special device for detection;        and at least one security feature requiring a special detection        device that is proprietary (i.e., it was manufactured        specifically for a particular client).    -   Secure Identification. This feature requires information        contained in the device to be unalterable without a        determination of who wishes to alter the information and for        what purpose. Highly secure chips with a hardware programmable        cryptographic block with credit and debit exchange keys is used        in one embodiment of the present invention. In addition, the        individual information of the vehicle (e.g., the VIN) and the        personal information (e.g., biometrics) contained in the device        must be protected.    -   Secure Transaction. This feature protects the device from the        equipment that reads and writes from the device. This equipment        must be initialized using the same encryption keys as the RF        device.    -   Secure Data Base. This feature protects information in the        central data base and the transaction log indicating where and        for whom the device was produced. Central data base security is        possible using encryption. This technology allows        centrally-stored information to be taken to the field (e.g., to        track the inspections for stolen vehicles). It also extends and        expands the verification of both individual and vehicle        identity.

III. RF Identification Mechanism and Method of Use

The present invention includes an RF identification mechanism, such as apassport, and a method of using the same. The present invention will bedescribed in the context of a passport. However, those experienced inthe art will recognize that the RF identification mechanism is notlimited to a passport, and multiple other embodiments are available,including, but not limited to: a license, credit card, cell phone, etc.

A. RF Identification Mechanism

FIG. 9 illustrates an RF registered item 900, according to oneembodiment of the present invention. The registered item 900 includesthe following components, as described earlier: a modulator 915, anAC/DC converter 920, an encoder 925, a power control 930, an instructionsequencer 940, a cryptographic block 910, a decoder 945, a securitymanagement unit 955, a memory 905, and an antenna 935.

B. Method of Using an RF Identification Mechanism

FIG. 10 illustrates a method of using the RF passport, according to oneembodiment of the present invention.

In 1005, identification information (e.g., a biometric template,photography, social security number, personal identification number) iscollected and written to the chip on the RF device. In 1010, the RFdevice is embedded on a passport. In 1015, the user enters an area wherea passport must be presented and an RF reader/writer reads theidentification information from the RF device on the passport. In 1020,an authority collects second identification information from the user(e.g., takes the user's fingerprint, looks at the user's face) and theinformation is compared to the RF device data to verify the user'sidentity.

C. Method of Making an RF Identification Mechanism

FIG. 11 illustrates how an RF passport is made, according to oneembodiment of the present invention. In 1105, the passport inlay isproduced on a PVC substrate. A copper wire and chip are embedded intothe passport inlay. In 1110, the passport inlay is embedded into thepassport document. In 1115, the passport is printed using a holographicretransfer film and dye sublimation inverse printing. In 1120, the RFpassport identification information is matched to the person who ownsthe passport. In 1125, the passport is initialized, and personalinformation and/or biometrics are encoded on the passport to the RFdevice. This is done after the passport is personalized for securityreasons. The RF passports are of no utility if they are stolen, as theyneed to be initialized with proper encryption keys and personalized.

IV. RF Communication Device and Method of Use

One embodiment of the RF communication device creates a communicationthrough a network to a point of sale (“POS”). This is performed, forexample, by a wireless RF device that stores a person's identificationinformation, and can thus become a person's identification “document.”This is discussed in the context of an RF cellular telephone, but thoseexperienced in the art will recognize that any communication device,including but not limited to a personal digital assistant or a pager,can be used.

As a user with an RF cellular telephone approaches a POS with an RFreader/writer, the RF reader/writer identifies the user and obtains anyrelevant information stored on the RF cellular telephone. The user isthen asked to enter authentication information (e.g., a fingerprint). Ifthe user wishes to complete a transaction, the user enters theauthentication information. An exchange of information via the RFreader/writer and the RF cellular telephone results in verification thatthe authentication information matches the RF cellular telephoneinformation.

The present invention, referred to in one embodiment as an RF cellulartelephone, creates a communication through a network of cells to a pointof sale (POS). This is performed by combining Global System for MobileCommunication (GSM) technology with a wireless RF device that can storea person's identification information, including an electronic orbiometric “signature” (e.g., fingerprint, facial, iris, or otherrecognition feature). GSM technology includes a compact chip located onthe back of the telephone. The compact chip has an operating system. TheGSM telephones identify the telephones to a network carrier to avoid,for example, telephone cloning.

The RF cellular telephone can thus become a person's identificationdocument (e.g., passport, boarding pass) and/or credit card or othercard (e.g., mileage cards). Multiple types of information can be carriedand stored on the RF cellular telephone. The following uses are examplesof how the RF cellular telephone can be used: an RF cellular telephonecan be used as a substitute for credit cards, transforming the cellulartelephone into the media of commercial transactions and transformtelephony into the identification media for commercial establishments orauthorities; an RF cellular telephone can be a personal identificationor a Portable Data File (PDF); an RF cellular telephone can beintegrated with a Global Positioning System (GPS) receiver; an RFcellular telephone can be integrated with hand held devices to provideInternet access, and access to business and personal information (e.g.,email); and an RF cellular telephone could be a boarding pass (e.g.,e-ticket) and/or could track a user going through security withauthentication by fingerprint at a gate or other local area. Thoseexperienced in the art will recognize that there are multiple otherexamples and uses of the RF cellular telephone.

One embodiment of the present invention provides at least one of thefollowing benefits: assists in avoiding current credit card fraud,through donation, substitution of identity, or counterfeit documents;reduces or eliminates the need to carry credit cards, documents (e.g., aboarding pass) or other information; reduces or eliminates the need foran entity to issue or update credit cards or identification documents(e.g., tickets), with associated fees (e.g., mailing costs); and reducesor eliminates the need to stand in line or wait for services.

The present invention is discussed in the context of using a fingerprintfor identification, as this is a widely recognized identification tool.However, those skilled in the art will recognize that any type ofidentification information (e.g., Personal Identification Number (PIN))or any other biometric identifier (e.g., a voice print, irisrecognition, facial recognition) could be used.

A. RF Communications Device System

FIG. 12 illustrates an RF communications device system, according to oneembodiment of the present invention. The system includes an RF cellulartelephone 1205 and a point of contact (POC) or point of sale (POS) 1210.

The POS 1210 can include an RF reader/writer 31 and a fingerprintdigital scanning device 1232. One-to-one verification ensures that theinformation on the RF cellular telephone matches the holder of the RFcellular telephone.

The RF cellular telephone 1205 can include the following: a fingerprintidentifier 1221 (e.g., an Application Specific Integrated Circuit (ASIC)chip, which is a chip that is designed specifically to run fingerprintmatching software on an operating system); and an RF device 1222 (withan antenna in the chip) to store identification information. In analternative embodiment, the RF cellular telephone can include afingerprint digital scanner 1223. As mentioned earlier, this couldeither be included on the RF cellular telephone, or on a fingerprintdigital scanning device at the point of contact.

One embodiment of the RF device 1222 includes a chip and an RF antenna,as described herein. One embodiment of the chip is illustrated in FIG.13. The chip is a passive chip that is secure. These chips have a powerunit converter and are secure. The e-prompt 1348, the memory of thechip, is totally separated from the rest of the communication, so if thesecurity requirements are not met, a user cannot access the memory ofthe chip. The chip includes an ACDC converter 1341 and a connection toan RF antenna for power using a power supply control unit 1345. The chipcommunicates with information stored on the telephone by coupling to aninput device in the cellular telephone. A modulator 1342 is a devicethat receives baseband signals from an antenna. An AC/DC converter 1341is a device that receives an alternating current (AC) and converts it todirect current (DC). An encoder 1343 is a device for encodinginformation received so that it may be utilized by another device orprotocol. A decoder 1344 is a device that decodes information from theencoder output so it may be used by another device or display. A powercontrol 1345 is a device which regulates voltage and current to protectan apparatus from both power surges and low power. An instructionsequencer 1347 is a device that queues instructions to be sent to thechip's internal memory. A security management unit 1346 is a device thatchecks and validates the cryptographic keys that will be sent to thecryptographic block. A cryptographic block 1349 is a device that storesthe security keys. These keys are checked and validated to grant or denyaccess to the memory chip. EEPROM memory 1348 stores data. Informationcan be read and written from or to this device.

In an embodiment of the present invention, the chip carriesauthentication information (e.g., fingerprint) and transactioninformation (e.g., credit card information, airline, or hotel mileagecard information). The RF cellular telephone also may include acryptographic programmable block chip 1349 to enhance security.

B. Method of Using an RF Communications System

FIG. 14 illustrates method of using an RF communications system 1400,according to one embodiment of the present invention. The presentinvention connects to a local POS, rather than a cellular carrier.Instead of a POS device obtaining credit card information via, forexample, a magnetic stripe, the present invention, via an RF embedded ona cellular telephone, provides information to the POS, which has an RFreader/writer. In addition, the POS may include a device (e.g., afingerprint reader) to verify that the holder of the RF cellulartelephone is the owner of the RF cellular telephone. The fingerprint, orother identification feature, can be stored, for example, in the Chip,or at a remote location, for example, which is accessed by the POSdevice. Thus, for example, the store could run a one-to-one localverification of a user's identification by having the user imprint theirfingerprint into a fingerprint reading device. The identificationinformation, such as a fingerprint, is a string of information. Thatinformation is stored on the Chip. When the user puts a fingerprint onthe POS fingerprint reader, the present invention will determine if thefingerprint matches the information stored on the RF cellular telephone.In an alternate embodiment, the user could imprint their fingerprintinto a fingerprint reading device included on the RF cellular telephone.

According to FIG. 14, in 1405, a user carries an RF cellular telephoneand approaches an RF reader/writer (e.g., in a hotel), which iscontinuously scanning. The RF reader/writer connects to the network(e.g., the Internet), identifies the user, and obtains relevanttransaction information (e.g., credit card information and hotel rewardscard information).

In 1410, the customer purchases a service or product and is prompted toenter authentication information (e.g., a fingerprint). In 1415, if theuser wishes to complete the transaction, the user enters authenticationinformation (e.g., imprints a fingerprint into a fingerprint scanner)and it is loaded to the RF device.

In 1420, the RF reader/writer and RF cellular telephone are used toverify the authentication information (e.g., the fingerprint scannerworks with the RF reader/writer and the RF cellular telephone and/orother devices to ensure the customer's fingerprint matches thefingerprint stored on the RF cellular telephone) and this information ispresented to a point of sale or access control device to retrievepurchase information.

Although the present invention has been described in the context of aPOS, those skilled in the art will recognize that a user could use theRF cellular telephone without a POS. For example, a user could call atelephone number to buy a ticket to access a stadium, using identityverification and other transmitted information. As another example, auser could load a boarding pass or ticket to an event on an RF cellulartelephone, and the boarding pass or ticket would be confirmed at anaccess control device around the perimeter of an airport lounge orstadium.

Additional information related to the present invention can be found inU.S. patent application Ser. No. 10/118,092, filed Apr. 2, 2002, and PCTPatent Application IB0201439, filed Apr. 30, 2002, which are hereinincorporated by reference.

V. System and Method for Border Crossing Control

One embodiment of the present invention provides a border crossingcontrol mechanism using RF technology. This technology helps provide aflexible, efficient, and effective border crossing security system tomeet the needs of rapidly changing security conditions. The presentinvention provides heightened security while at the same timeefficiently and quickly moving vehicles and people across borders andthrough customs. In this embodiment, an identification mechanism (e.g.,a laser card) is integrated with a vehicle decal that registers andmatches any shipping components (e.g., drivers, vehicles, containers).The shipping components will be pre-registered in the decal at a pointof origin. A fingerprint biometric of the driver is written into theidentification card and the decal at the factory. An RF antenna embeddedinto the decals allows tracking of, for example, the driver, cab andtrailer, and validation of these components at strategic checkpoints. Italso provides for designated routing through the port for inspection andclearance prior to departing the port.

The present invention can be used in a closed system or open system. Ina closed system, all information resides on the RF laser card and RFdecals. In an open system, information is passed from the point oforiginal to country A's custom's inspectors, and from country A'scustoms inspectors to Country B's customs inspectors using a network(e.g., the Internet). This makes integration and implementation easier.

A. Border Crossing Control System

FIG. 15 illustrates border crossing control system 1500, according toone embodiment of the present invention.

The system 1500 includes at least one client 1505, application server1510, database 1515, RF identification mechanism 1520, RF device 1525,RF reader/writer 1530, connected by a network 1520.

Client.

According to one embodiment of the present invention, clients are anycomputers (e.g., PC, PDA, cellular phone) connected to a network (e.g.,LAN [Local Area Network], WAN [Wide Area Network], VPN tunnel [VirtualPrivate Network Tunnel], Internet).

Application Server.

According to one embodiment of the present invention, an applicationserver is used (e.g., an Oracle9iAS integrated into a J2EE applicationserver). The application server can support web application software,wireless, web page caching, business intelligence features, and offercomplete integration in a single product. The application server canalso offer scalability, reliability, and security features. It can alsoinclude advanced clustering features to keep critical applications upand running 24×7; offers zero downtime and planned downtime through afast start fault recovery architecture; and recover from incidentsquickly and gracefully.

In the example embodiment of an Oracle9i application server, the highavailability infrastructure includes Oracle9iAS Web Cache clusters,Oracle HTTP Server (Apache), and Oracle9iAS Containers for J2EE. Inaddition, database applications hosted on Oracle9i Application Servercan take advantage of Oracle9i Real Application Clusters (RAC) to makethem more available. Oracle9i Application Server is the middle-tierdeployment platform for all applications developed using Oracle9iDeveloper Suite. All applications can be deployed on the samemiddle-tier. Oracle9i Developer Suite is a complete and standards-basedset of development tools. The suite includes Oracle9i 1Developer,Oracle's flagship J2EE and XML development environment that supports thefull development life cycle of J2EE applications and Web services. Italso includes Oracle9i Forms Developer for easily and quickly constructsophisticated database forms and business logic delivered through anyInternet browser as a high performance, rich Java client.

Database.

In one embodiment, the present invention uses a database with realapplication clusters (RAC) that can transparently scale and protectpackaged applications with no changes necessary for the application(e.g., Oracle9i). RAC can scale all applications and also providessuperior data protection with hot failover in less than 30 seconds.

According to one embodiment, the database provides a unique combinationof scalability and availability in the same clustered database solution.With RAC, efficient scaling can be accomplished by simply adding serversto the overall cluster as the demand grows. Since RAC databases can growflexibly, applications are protected from having to purchase excesscomputing power at a premium price. A RAC database can have costssignificantly lower than the same solution implemented on an SMP(Symmetric Multi Processing) machine.

The database may include security and manageability features. Thesecurity features include: a Virtual Private Database (VPD);fine-grained auditing; data encryption.

The VPD technology provides programmatic row-level security and isenabled by associating tables or views with centrally defined accesscontrol policies. VPD addresses the application bypass problem andensures that the same access control policy is enforced whether a usergains access to data through an application, ad hoc tool or SQL*Plus. Asa result, multiple communities of users can securely share data withinthe same database.

Fine-grained auditing allows businesses to audit database activity bystatement, system privilege, object or user. Its enhanced fine-grainedauditing functionality enables organizations to centrally definespecific audit policies that alert administrators to data access misuse.Audit records, stored within the database, capture the user statement'sexact SQL text and can be easily viewed through ad hoc queries.

Data encryption is the ability to natively encrypt data in the database,enabling applications to guard sensitive data. Server-based encryptionsupports industry-standard Data Encryption Standard (DES) and Triple-DES(3DES), in both two and three key modes for any organizations whorequire the strongest level of encryption. Encryption can also supportthe MD5 secure cryptographic hash to ensure data integrity and a FederalInformation Processing Standard (FIPS) 140-certified random numbergenerator for generating secure encryption keys.

The manageability features include intelligent self-managing and tuning.The database can enhance database manageability by automating routinetasks, reducing complexity of administration and making the databasemore self-tuning and self-managing. Features can be added to streamlinespace, memory, and resource management as well as other day-to-daydatabase administrative tasks.

RF Identification Mechanism, RF Device, and RF Reader/Writer.

One embodiment of the present invention comprises: an RF identificationmechanism (e.g., an RF laser card), RF decals containing a Chip (e.g., a2K bit chip or data memory circuit) with contactless read/writecapabilities and an integrated RF antenna (e.g., a 13.56 MHz RFantenna); and an RF reader/writer.

Multiple Chip Background Information.

Often multiple frequencies are used. This takes advantage of the bestelectromagnetic and electrostatic characteristics of certainfrequencies, one for long range reading and the second for fieldpenetration (e.g., rain). Multiple frequencies can be created using adual modulator that can switch in milliseconds from one frequency toanother. (See FIG. 16.)

In one embodiment of the present invention, instead of, or in additionto incorporating the chip on the RF identification mechanism (e.g., RFsmart laser card or RF decal), a chip can be embedded on a carwindshield for smart windshield applications for vehicle registration,manufacturing, distribution of traffic violations, or any operation thatrequires contact with certain authorities. In this embodiment, the RFantenna can be used as radio antennas embedded on glass with copper wireduring the manufacturing process, and connected to a module or embeddedin the glass itself.

The resonant frequency of the antenna circuit in the RF device can begiven by solving this equation:

$f = \frac{1}{2\pi \left. \sqrt{}{LC} \right.}$

-   -   f=frequency (Hz)    -   L=inductance (H)    -   C=capacitance (F)

The frequencies at the poles are parallel resonant frequencies, anddepending on the technology can be:

f₁ = 13.56  MHz f₂ = 915  MHz $L = \frac{N^{2}\mu_{o}A}{l}$

-   -   N=number of windings around inductor    -   μ₀=permeability of freespace (H m⁻¹)    -   A=cross-sectional area of inductor(m²)        -   l=length of inductor(m)

The inductance “L” depends on the number of turns of the coil, of thearea perpendicular to the coil and of the permeability of free spacesand length of the coil. Therefore:

$l = {\frac{N^{2}\mu_{o}A}{l}\text{=>}}$$\frac{N^{2}\mu_{o}A}{l}\begin{matrix}l \\{f^{2}4\pi^{2}C}\end{matrix}\text{=>}$ l = f²4π²N²μ_(o)A

For substitution, the following values are used:

L ₁=2.931×10⁸ H

L ₂=6.437×10¹⁰ H

The data signal between the antenna and the tag is modulated byamplitude and coded by a Manchester encoding. Thus, manchester data=NRZdata ̂ (NRZ clock).

Multiple RF Chip Overview

FIG. 17 illustrates an overview of the chip, according to one embodimentof the present invention. As described in detail above, the chipincludes: an AC/DC converter (915 MHz) 1705 and accompanying powersupply control unit 1715; a modular 1710; a codifier 1720; an AC/DCconverter (13.56 MHz) 1745 and accompanying power supply control unit1750; a decoder 1740; a security administrator 1755; an instructionsequencer 1730; a cryptographic block 1725, and memory 1735.

B. Method of Using a RF Border Crossing Control System

FIG. 18 illustrates method for using an RF border crossing controlsystem 1800, according to one embodiment of the present invention. In1805, an RF decal is issued at the point of origin for each shippingcomponent (e.g., tractor/cab; trailer/bed; containers). In 1810, data iswritten to the embedded chip using a computer (e.g., a PC) located atthe point of origin. Electronic forms can be used to ensure consistency,accuracy and completeness in the information gathering and decalIssuance process. Information includes: specific details foridentification and verification of the tractor, trailer, and containers;specific information on the driver including photo and biometricinformation (e.g., fingerprint); time stamp of when the driver, tractor,trailer, and containers leave the point of origin.

In 1815, a certified official (e.g., company official, customs agent)applies the RF decal to the shipping components (e.g., cab, trailer,containers) at the point of origin or other appropriate place. In 1820,the driver's personal data and shipment information are written to thedriver's RF identification mechanism (e.g., laser card) at the point oforigin or other appropriate place.

In 1825, at the point of entry or other appropriate place, RF antennasautomatically read the RF decals as the vehicle approaches the custom'sstation and displays the data. A display screen on a computer (e.g., PC,PDA) in the customs area displays a reading of each RF decal as theypass within X number of feet of the antennas. The computer validateseach RF decal by providing identification information (e.g., driver'sphoto, fingerprint, other data input at point of origin.) In 1830, thedriver presents his RF laser card to a custom's officials at the pointof entry (or other appropriate place) for validation and shipmentverification. In 1835, the customs agent clears the shipping componentsfor entry/exit and inputs this approval information to the RF card andRF decal. If the vehicle requires additional customs inspections, thecustoms agent will assign the next inspection station information to thedriver's RF card and RF decals.

In 1840, as an additional option, at the conclusion of the customsinspection process, and after all approval data is written to the RFdecals, a final check is conducted at the port exit or other appropriateplace. As the vehicle approaches the exit point, the RF decals are readfor the final check to ensure all have matching data. This will be proofthat the vehicle passed through all required checkpoints, inspections,and processing. As with the point of entry, each RF decal is read insequence and the information is displayed to the custom agent's displayscreen. If any RF decal information does not match, the display willindicate a stop and the vehicle will be stopped for additionalinspection or validation.

VI. System and Method for Limiting Software Downloads

One embodiment of the present invention relates to a de-metalizingedging process, and various resultant combinations of embedded processorchip, antenna, metallic hologram, integrated circuit, and substrate formfactors to produce an end product (e.g., smart card or smart label).This enables RF communication within a networked system configured forvarious identification and verification applications. These security RFsmart labels can be adapted to the identification and data capturerequirements associated with unique software media or packaging of anysoftware publisher, ISV or manufacturer.

A. System for Limiting Software Downloads

FIG. 19 illustrates system for limiting software downloads, according toone embodiment of the present invention. The system includes a RFread/write device, an RF smart label with a chip and RF antenna, and thesoftware.

The software media (e.g., a CD) and/or package carries an RF smartlabel, containing an RF antenna providing a link to a chip 1900. Thechip has encryption and read/write capabilities. Access is controlledthrough a certificate of authenticity 1910. Working in combination withan RF reader/writer, the present invention will capture any availableunique digital central processing unit (CPU) or processor number andread/write to an original certificate of authenticity. The system locksthe certificate to the CPU or processor, and will not allow this uniquesoftware to be installed on any machine other than the one on which itwas initially authorized to be loaded. This highly secure encryptedsolution can also be used to control access to customer support, debugs,updates and other services via the network (e.g., Internet) forauthentic paid software licenses only. As described above, the chipincludes a modulator 1905, encoder 1965, decoder 1940, instructionsequencer 1915, cryptographic block 1920, converter 1920, power control1945, security management 1950, memory 1955, and antenna 1960.

VPN Tunnel Mode.

The present invention can be incorporated into a network, such as aVirtual Private Network (VPN). A VPN is a private data network thatmakes use of the public telecommunication network or Internetinfrastructure, maintaining privacy through the use of security andauthentication procedures. A VPN is the emulation of a virtual privateWide Area Network (WAN) facility using Internet Protocol (IP)facilities. The VPN may use many aspects of networking, such as IPaddressing, advertising reach ability, Quality of Service (QoS), datasecurity and access control.

FIG. 20 illustrates a VPN tunnel mode solution, according to oneembodiment of the present invention. A database 2005 is connected to asecurity gateway 2015, which is connected to an application server 2010,connected to the client 2025 through a network 2020. Tunnel mode is usedwhen one or more IP clients need to communicate to a main computer orserver computer. The tunnel mode utilizes data encryption and keymanagement. The VPN end points monitor the operation of the VPN tunnels(VPN clients) to ensure the connectivity has not been lost, and takeappropriate action if there has been a failure. This is very importantbecause all applications are dependent.

The present invention utilizes features that provide high-quality,interoperable cryptographic base security for access centralinformation. For example, two traffic protocols are used: anAuthentication Header (AH) that provides data integrity; and anEncapsulation Security Payload (ESP) that provides confidentiality(e.g., encryption of data), data integrity, and thought use ofcryptographic-key management procedures. ESP is known as an Internet KeyExchange (IKE) protocol. This protocol negotiates the securityassociation between two end points and exchanges keys between them.

There exist two operation modes for both AH and ESP: transport mode andtunnel mode. Transport mode is used to authenticate informationtransmitted between nodes or machines (e.g., computers, servers) on aWAN/LAN network. Tunnel mode is used for communication between two ormore end points that pass through a public network (e.g., the Internet).Tunnel mode is used to provide more security for information accessed byremote users or applications.

FIG. 3A illustrates the differences between transport mode and tunnelmode. The use of AH and ESP are illustrated in FIG. 38.

B. Method of Limiting Software Downloads

FIG. 21 illustrates method for limiting software downloads to authorizedusers 2100, according to one embodiment of the present invention. In2105, a software license is issued with an RF device (including a chipwith an RF antenna) to an authorized user for one computer. In 2110,when the user installs the software on a computer (e.g., computer #1),the RF device reads the computer's serial number from computer #1. In2115, if the chip information on the RF device matches the informationon computer #1, the software is installed. In 2120, as the softwarelicense in this case is for only one computer, the software will not beable to be installed on other computers until the software is removedfrom computer #1, when the serial number from computer #1 is erased. Inan alternate embodiment, where a license is granted for X number ofusers, only X number of computer serial numbers will be able to bechecked by the RF device, and thus only X users can download thesoftware.

In additional embodiments, use of other unique identifyingcharacteristics associated with other computer components (e.g., mouse,motherboard or central processing unit cabinet), can be utilized. In afurther embodiment, the present invention is used for multi-license andcorporate environments. In these cases, where an authorized corporatelicensing entity with a registered billing address has access tosoftware through a network (e.g., the Internet), the RF device limitsthe download of software to the number of users or units authorizedunder the license agreement. The present invention can control downloadsto any computer, including central servers or individual PCs. Thissimple, yet highly secure kit locks the number of each CPU or processorfor the central server and the PCs to the authorized number of users foreach version of software, thus providing a seamless, secure upgradecapability. In an additional embodiment, the present invention providesan adapted PDA to provide additional support for software distributionand inventory control, as well as instant legal software authenticationfor law enforcement and industry piracy control.

VII. System and Method for Airport Security

The present invention is a scalable, end-to-end RF identification systemfor airport and air transport security and addresses, for example, thefollowing issues: establishes the actual identity of a passenger; runs ahot file fingerprint search against the INS, CIA, INTERPOL, FBIdatabases; links passenger to boarding pass and checked/handheldbaggage; cross-verifies passenger identification at strategic pointswithin the airport environment; cross-verifies stowed baggage withboarded passengers; track individuals within the airport; highly secure,cost effective, and non-intrusive; enables speedy and accurate passengerprocessing. In a security system that ultimately extends to existingairline and government computer systems and databases, the presentinvention is the “final link” that allows designated security personnelto track and validate on the spot the status of persons or itemsthroughout the airport environment.

While the invention is described in the context of airport security,those experienced in the art will see that any facility (e.g., trainstation, ship, company campus, university campus) with a need forsecurity can use the present invention, and the present invention is notlimited to use in an airport facility.

A. Airport Security System

FIG. 22 illustrates a chip of an airport security system, according toone embodiment of the present invention. The present invention includes:an RF reader/writer; and an RF identification mechanism (e.g., RFboarding pass, RF luggage tags, RF identification cards) including an RFdevice. Alternatively, AFIS verification scanners, security and controlsoftware, and distributed databases can be included.

The RF reader/writer can comprise computer system components (e.g.,remote readers/writers, verification scanners, client/server or thinclient systems and networks, and application software and databases).

The RF device contains an integrated computer chip and RF antenna forcontactless communication at an operating frequency of, for example,13.56 MHz.

The chip contains unique identifying data for persons or items subjectto scrutiny, and can be read by nearby security or other controlpersonnel with handheld or stationary RF reader/writer or RFreader/writer devices for real time validation. Furthermore, the RFdevice is manufactured with light diffraction and other high securityprint features that eliminate document forgery and enable instant visualverification of authenticity. The RF device also includes an integratedAFIS digital fingerprint capability. The present invention can also useother unique identifying characteristics associated with additionalelements of the air transport industry, including cargo, flightservices, maintenance, and aircraft parts.

As described above, the chip has a memory 2205 (e.g., 2 k), an optionhardware wired cryptographic block 2210 (with 4 exchange encrypted keyswith up to 256 bits), a modulator 2215, a converter 2220, an encoder2225, a power control 2230, an instruction sequencer 2260, a decoder2245, a security management unit 2255, a memory 2205.

B. Method of Airport Security

FIG. 23 illustrates a method of airport security, according to oneembodiment of the present invention. In 2305, to facilitate air travelsecurity, passengers are issued an official RF air travel identificationcard (e.g., with a photo and fingerprint scan) by a federal authority orthe airlines following an agreeable level of background check. Thisprocess could be as simple as checking names verified by some acceptableidentification (e.g., drivers' license, passport) against a networkedhot list. The identification data is read and locked to the RF airtravel identification card. During processing and prior to issuance,applicants' biometrics are processed and compared with a “one-to-many”hot list. With a successful security check, the applicant is issued ahighly secure identification document with unique visual, biometric, anddescriptive data that can be quickly verified throughout the airport andacross the air travel system. A similar process would be applied toairport, airline, and service personnel. Those experienced in the artwill note that a general RF identification card or mechanism (e.g., PDA)can be used instead of specific air travel RF identification card.

In 2310, a passenger presents the RF air travel identification card orother RF identification mechanism to the airline authority whentraveling. In 2315, The agent scans the RF air travel identificationcard. In 2320, the RF boarding pass and RF baggage tags are printed forthe passenger. The boarding card now contains all data and trackingmechanisms required for secure passenger access to the gate and thematching aircraft, as well as boarding verification. In an alternativeembodiment, instead of issuing an RF boarding pass, the RF air travelidentification card can also contain e-ticket information. In parallelto the issuance of the boarding pass, identity information is capturedby the system and digitally copied, together with the relevant travelroute and destination data onto the RF baggage tags. The RF baggage tagsare printed through systems and printers enhanced with an RFidentification write device. The RF baggage tag now contains all dataand tracking mechanisms required to link passenger, bag, and flight,thus enabling verifiable passenger/baggage/flight cross-referencing tothe matching aircraft.

CONCLUSION

Additional advantages and novel features of the invention will be setforth in part in the Attachments that follow, and in part will becomemore apparent to those skilled in the art upon examination of thefollowing or upon learning by practice of the invention.

What is claimed is:
 1. A RFID reader, comprising: a radio and anantenna; a processor coupled with the radio, the processor configuredto: send a first communication to a RFID transponder via the radio andthe antenna that includes a memory the contents of which includes anidentifier, send a second communication to the RFID transponder via theradio and the antenna that includes a security key for validation by theRFID transponder, receive at least the identifier included in the memorycontents via the radio and the antenna in response to the secondcommunication and as a result of validation of the security key, andtransmit the identifier to a central database.